← Database

CVE-2022-1695

MEDIUM CVSS: 4.3 Published: 2022-06-08 Modified: 2026-06-17

Description

The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form.

Affected Platforms

Tipsandtricks-Hq Wp Simple Adsense Insertion

Weakness Type

CWE-352, CWE-352

References